Show HN: Sniffgit – A Python lib to find sensitive files and information in a repo

Re:Show HN: Sniffgit – A Python lib to find sensitive files ... by chatmasta on Wednesday January 10, 2018 @01:57PM (#16117761)

Nice start. I notice this only scans the HEAD of the repository. Have you considered implementing functionality to go back through previous commits and check for secrets in files there? After all, once something is committed to git, even if you change the file, the old version is still there (by design, obviously).

For a more complex implementation of a solution to this problem, checkout trufflehog [0], which "searches through git repositories for high entropy strings and secrets, digging deep into commit history."

[0] https://github.com/dxa4481/truffleHog

[ Parent | on HN ]

Re:Show HN: Sniffgit – A Python lib to find sensitive files ... by LHardi on Thursday January 11, 2018 @01:14AM (#16121771)

Hi there, a feature to scan previous commits sounds awesome and I'll start working on it soon!

truffleHog also provides a sophisticated approach in detecting potential secret strings.

Thank you for the feedback! :)

[ Parent | on HN ]